@event4u/agent-config 14.11.0 → 14.12.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (350) hide show
  1. package/.augment-plugin/marketplace.json +3 -3
  2. package/.augment-plugin/plugin.json +1 -1
  3. package/.claude-plugin/marketplace.json +1 -1
  4. package/CHANGELOG.md +156 -538
  5. package/README.md +1 -1
  6. package/dist/agent-src/contexts/execution/evidence-discipline.md +26 -0
  7. package/dist/agent-src/skills/code-refactoring/SKILL.md +45 -1
  8. package/dist/agent-src/skills/code-review/SKILL.md +65 -6
  9. package/dist/agent-src/skills/command-writing/SKILL.md +35 -0
  10. package/dist/agent-src/skills/existing-ui-audit/SKILL.md +8 -1
  11. package/dist/agent-src/skills/project-analysis-core/SKILL.md +23 -0
  12. package/dist/agent-src/skills/react-shadcn-ui/SKILL.md +29 -12
  13. package/dist/agent-src/skills/skill-writing/references/procedure.md +24 -2
  14. package/dist/agent-src/skills/storybook-workshop/SKILL.md +9 -0
  15. package/dist/agent-src/skills/ui-component-architect/SKILL.md +8 -0
  16. package/dist/agent-src/templates/agents/agent-project-settings.example.yml +1 -1
  17. package/dist/cli-delegate/{chunk-L43NCYPB.js → chunk-JCW7ZLHK.js} +5 -0
  18. package/dist/cli-delegate/{chunk-236PNQZK.js → chunk-JJA2QEWA.js} +1 -1
  19. package/dist/cli-delegate/cmd_export.js +2 -2
  20. package/dist/cli-delegate/cmd_prune.js +2 -2
  21. package/dist/cli-delegate/cmd_settings_migrate.js +2 -2
  22. package/dist/cli-delegate/cmd_settings_set.js +1 -1
  23. package/dist/cli-delegate/cmd_sync.js +2 -2
  24. package/dist/cli-delegate/cmd_uninstall.js +2 -2
  25. package/dist/cli-delegate/cmd_validate.js +2 -2
  26. package/dist/discovery/deprecation-report.md +1 -1
  27. package/dist/discovery/discovery-manifest.json +10 -10
  28. package/dist/discovery/discovery-manifest.json.sha256 +1 -1
  29. package/dist/discovery/discovery-manifest.summary.md +1 -1
  30. package/dist/discovery/dormancy-report.md +1 -1
  31. package/dist/discovery/orphan-report.md +1 -1
  32. package/dist/discovery/packs.json +2 -2
  33. package/dist/discovery/trust-report.md +1 -1
  34. package/dist/discovery/workspaces.json +2 -2
  35. package/dist/hooks/dispatch.js +1081 -879
  36. package/dist/install/install.mjs +5 -0
  37. package/dist/mcp/registry-manifest.json +2 -2
  38. package/dist/mcp/server.json +2 -2
  39. package/dist/server/schemas/settings.js +3 -0
  40. package/docs/contracts/settings-classes.md +24 -4
  41. package/docs/guidelines/agent-infra/downstream-changes-mechanics.md +91 -0
  42. package/docs/guidelines/code-clarity.md +21 -0
  43. package/docs/guidelines/redundancy-taxonomy.md +180 -0
  44. package/package.json +6 -2
  45. package/src/config/agent-settings.template.yml +16 -0
  46. package/src/config/budgets.yml +19 -0
  47. package/src/config/ci-local-parity.yml +15 -0
  48. package/src/config/discovery/prompt-patterns.yml +56 -0
  49. package/src/config/estate-count-budget.json +8 -3
  50. package/src/config/gate-coverage.yml +191 -6
  51. package/src/config/gate-violation-baselines.json +3 -3
  52. package/src/config/pack-size-budget.json +39 -12
  53. package/src/config/preamble-payload-budget.json +97 -71
  54. package/src/config/routing-coverage-seed.json +29 -0
  55. package/src/config/suggestion-capture.json +28 -0
  56. package/src/config/surface-matrix.yml +21 -2
  57. package/src/config/web-launch-readiness.json +188 -0
  58. package/src/scripts/_lib/gate_baseline.ts +150 -1
  59. package/src/scripts/_lib/skill_estate.ts +115 -0
  60. package/src/scripts/ai_council/argument_exhaustion.ts +130 -0
  61. package/src/scripts/check_bundle_path_leakage.ts +162 -7
  62. package/src/scripts/check_command_examples.ts +557 -0
  63. package/src/scripts/check_estate_count.ts +122 -3
  64. package/src/scripts/check_preamble_payload_budget.ts +30 -3
  65. package/src/scripts/check_routing_coverage.ts +352 -0
  66. package/src/scripts/check_score_contract.ts +505 -0
  67. package/src/scripts/check_skill_admissions.ts +514 -0
  68. package/src/scripts/check_web_launch_readiness.ts +705 -0
  69. package/src/scripts/description_route_check.ts +494 -0
  70. package/src/scripts/hook_manifest.json +1 -1
  71. package/src/scripts/hook_manifest.yaml +29 -2
  72. package/src/scripts/hooks/concern_registry.ts +2 -0
  73. package/src/scripts/hooks/suggestion_capture_hook.ts +368 -0
  74. package/src/scripts/lint_budget_ownership.ts +54 -4
  75. package/src/scripts/lint_skill_trigger_corpus.ts +349 -0
  76. package/src/scripts/pack_install_smoke.ts +363 -0
  77. package/src/scripts/pr_conflict_census.ts +187 -0
  78. package/src/scripts/report_pack_delta.ts +204 -0
  79. package/src/scripts/select_analysis_mode.ts +112 -0
  80. package/src/scripts/sync_pr_branch.ts +40 -1
  81. package/src/server/schemas/settings.ts +5 -0
  82. package/dist/agent-src/skills/accessibility-auditor/evals/evals.json +0 -15
  83. package/dist/agent-src/skills/agent-security-review/evals/triggers.json +0 -52
  84. package/dist/agent-src/skills/ai-code-blindspots/evals/triggers.json +0 -52
  85. package/dist/agent-src/skills/alerting-doctrine/evals/triggers.json +0 -17
  86. package/dist/agent-src/skills/analysis-skill-router/evals/evals.json +0 -13
  87. package/dist/agent-src/skills/brand/evals/triggers.json +0 -17
  88. package/dist/agent-src/skills/brand-asset-generation/evals/triggers.json +0 -17
  89. package/dist/agent-src/skills/brand-audit/evals/triggers.json +0 -17
  90. package/dist/agent-src/skills/brand-identity/evals/triggers.json +0 -17
  91. package/dist/agent-src/skills/brand-strategy/evals/triggers.json +0 -17
  92. package/dist/agent-src/skills/brand-to-tokens/evals/triggers.json +0 -17
  93. package/dist/agent-src/skills/bug-analyzer/evals/evals.json +0 -13
  94. package/dist/agent-src/skills/canvas-design/evals/triggers.json +0 -17
  95. package/dist/agent-src/skills/character-consistency/evals/evals.json +0 -16
  96. package/dist/agent-src/skills/code-intelligence/evals/triggers.json +0 -52
  97. package/dist/agent-src/skills/code-review/evals/evals.json +0 -100
  98. package/dist/agent-src/skills/command-routing/evals/evals.json +0 -14
  99. package/dist/agent-src/skills/complexity-first-planning/evals/triggers.json +0 -17
  100. package/dist/agent-src/skills/contract-review/evals/triggers.json +0 -17
  101. package/dist/agent-src/skills/conventional-commits-writing/evals/evals.json +0 -15
  102. package/dist/agent-src/skills/corpus-grounding/evals/triggers.json +0 -17
  103. package/dist/agent-src/skills/dashboard-design/evals/evals.json +0 -16
  104. package/dist/agent-src/skills/dcf-modeling/evals/domain-truth.json +0 -29
  105. package/dist/agent-src/skills/dcf-modeling/evals/evals.json +0 -20
  106. package/dist/agent-src/skills/decision-record/evals/evals.json +0 -20
  107. package/dist/agent-src/skills/decision-record/evals/triggers.json +0 -87
  108. package/dist/agent-src/skills/design-intelligence/evals/evals.json +0 -14
  109. package/dist/agent-src/skills/design-intelligence/evals/triggers.json +0 -17
  110. package/dist/agent-src/skills/design-system-capture/evals/evals.json +0 -15
  111. package/dist/agent-src/skills/design-tokens/evals/triggers.json +0 -17
  112. package/dist/agent-src/skills/design-variations/evals/triggers.json +0 -17
  113. package/dist/agent-src/skills/developer-like-execution/evals/evals.json +0 -16
  114. package/dist/agent-src/skills/doc-coauthoring/evals/evals.json +0 -16
  115. package/dist/agent-src/skills/doc-coauthoring/evals/triggers.json +0 -17
  116. package/dist/agent-src/skills/docx-authoring/evals/triggers.json +0 -52
  117. package/dist/agent-src/skills/dpa-review/evals/triggers.json +0 -17
  118. package/dist/agent-src/skills/editorial-calendar/evals/domain-truth.json +0 -16
  119. package/dist/agent-src/skills/editorial-calendar/evals/evals.json +0 -16
  120. package/dist/agent-src/skills/eloquent/evals/triggers.json +0 -17
  121. package/dist/agent-src/skills/estimate-ticket/evals/evals.json +0 -16
  122. package/dist/agent-src/skills/estimate-ticket/evals/output-schema.yml +0 -20
  123. package/dist/agent-src/skills/estimate-ticket/evals/triggers.json +0 -19
  124. package/dist/agent-src/skills/evaluate-llm-feature/evals/triggers.json +0 -52
  125. package/dist/agent-src/skills/existing-ui-audit/evals/triggers.json +0 -47
  126. package/dist/agent-src/skills/experiment-loop/evals/output-schema.yml +0 -27
  127. package/dist/agent-src/skills/experiment-loop/evals/triggers.json +0 -17
  128. package/dist/agent-src/skills/fe-design/evals/triggers.json +0 -67
  129. package/dist/agent-src/skills/forecasting/evals/domain-truth.json +0 -29
  130. package/dist/agent-src/skills/forecasting/evals/evals.json +0 -20
  131. package/dist/agent-src/skills/forensics-report/evals/triggers.json +0 -17
  132. package/dist/agent-src/skills/frontend-render-security/evals/triggers.json +0 -52
  133. package/dist/agent-src/skills/fundraising-narrative/evals/domain-truth.json +0 -16
  134. package/dist/agent-src/skills/fundraising-narrative/evals/evals.json +0 -16
  135. package/dist/agent-src/skills/gated-reach/evals/triggers.json +0 -72
  136. package/dist/agent-src/skills/github-ci/evals/evals.json +0 -25
  137. package/dist/agent-src/skills/history-design/evals/triggers.json +0 -17
  138. package/dist/agent-src/skills/html-deck/evals/triggers.json +0 -17
  139. package/dist/agent-src/skills/humanizer/evals/strip_fixtures.json +0 -57
  140. package/dist/agent-src/skills/humanizer/evals/triggers.json +0 -17
  141. package/dist/agent-src/skills/iconography/evals/triggers.json +0 -17
  142. package/dist/agent-src/skills/image-analyser/evals/triggers.json +0 -17
  143. package/dist/agent-src/skills/image-creator/evals/triggers.json +0 -17
  144. package/dist/agent-src/skills/image-editing/evals/triggers.json +0 -17
  145. package/dist/agent-src/skills/image-generation/evals/triggers.json +0 -17
  146. package/dist/agent-src/skills/image-provider-routing/evals/triggers.json +0 -17
  147. package/dist/agent-src/skills/incident-commander/evals/domain-truth.json +0 -16
  148. package/dist/agent-src/skills/incident-commander/evals/evals.json +0 -20
  149. package/dist/agent-src/skills/js-library-packaging/evals/triggers.json +0 -17
  150. package/dist/agent-src/skills/judge-artifact-completeness/evals/triggers.json +0 -17
  151. package/dist/agent-src/skills/judge-injection-defense/evals/triggers.json +0 -17
  152. package/dist/agent-src/skills/judge-synthesis/evals/triggers.json +0 -17
  153. package/dist/agent-src/skills/launch-readiness/evals/evals.json +0 -21
  154. package/dist/agent-src/skills/learning-tutor/evals/triggers.json +0 -52
  155. package/dist/agent-src/skills/legal-intake-triage/evals/triggers.json +0 -17
  156. package/dist/agent-src/skills/legal-practice-profile/evals/triggers.json +0 -17
  157. package/dist/agent-src/skills/license-compliance-audit/evals/triggers.json +0 -52
  158. package/dist/agent-src/skills/license-compliance-borrow-check/evals/triggers.json +0 -52
  159. package/dist/agent-src/skills/license-compliance-credits/evals/triggers.json +0 -52
  160. package/dist/agent-src/skills/llm-provider-knowledge/evals/triggers.json +0 -20
  161. package/dist/agent-src/skills/logging-monitoring/evals/evals.json +0 -16
  162. package/dist/agent-src/skills/logo-generation/evals/triggers.json +0 -17
  163. package/dist/agent-src/skills/messaging-architecture/evals/domain-truth.json +0 -16
  164. package/dist/agent-src/skills/messaging-architecture/evals/evals.json +0 -16
  165. package/dist/agent-src/skills/monorepo-workspace/evals/triggers.json +0 -17
  166. package/dist/agent-src/skills/nda-triage/evals/triggers.json +0 -17
  167. package/dist/agent-src/skills/operational-readiness/evals/triggers.json +0 -17
  168. package/dist/agent-src/skills/pdf-tools/evals/triggers.json +0 -52
  169. package/dist/agent-src/skills/perf-feedback-craft/evals/evals.json +0 -16
  170. package/dist/agent-src/skills/persona-improvement/evals/triggers.json +0 -52
  171. package/dist/agent-src/skills/php-coder/evals/triggers.json +0 -17
  172. package/dist/agent-src/skills/prediction-pool-optimizer/evals/triggers.json +0 -21
  173. package/dist/agent-src/skills/prompt-engineering-image/evals/triggers.json +0 -17
  174. package/dist/agent-src/skills/prompt-engineering-patterns/evals/evals.json +0 -16
  175. package/dist/agent-src/skills/prompt-validator/evals/triggers.json +0 -17
  176. package/dist/agent-src/skills/quality-tools/evals/evals.json +0 -15
  177. package/dist/agent-src/skills/reasoning-orchestrator/evals/triggers.json +0 -17
  178. package/dist/agent-src/skills/refine-prompt/evals/evals.json +0 -16
  179. package/dist/agent-src/skills/refine-ticket/evals/evals.json +0 -16
  180. package/dist/agent-src/skills/refine-ticket/evals/output-schema.yml +0 -16
  181. package/dist/agent-src/skills/refine-ticket/evals/triggers.json +0 -17
  182. package/dist/agent-src/skills/release-comms/evals/evals.json +0 -16
  183. package/dist/agent-src/skills/rice-prioritization/evals/evals.json +0 -20
  184. package/dist/agent-src/skills/runway-cognition/evals/domain-truth.json +0 -29
  185. package/dist/agent-src/skills/runway-cognition/evals/evals.json +0 -20
  186. package/dist/agent-src/skills/scenario-modeling/evals/domain-truth.json +0 -29
  187. package/dist/agent-src/skills/scenario-modeling/evals/evals.json +0 -20
  188. package/dist/agent-src/skills/schema-review/evals/triggers.json +0 -17
  189. package/dist/agent-src/skills/screenshot-hygiene/evals/triggers.json +0 -52
  190. package/dist/agent-src/skills/security-maturity-assessment/evals/triggers.json +0 -52
  191. package/dist/agent-src/skills/server-hardening/evals/triggers.json +0 -17
  192. package/dist/agent-src/skills/skill-writing/evals/triggers.json +0 -17
  193. package/dist/agent-src/skills/spreadsheet-authoring/evals/triggers.json +0 -47
  194. package/dist/agent-src/skills/storybook-workshop/evals/triggers.json +0 -17
  195. package/dist/agent-src/skills/subagent-orchestration/evals/evals.json +0 -60
  196. package/dist/agent-src/skills/supply-chain-intake/evals/triggers.json +0 -52
  197. package/dist/agent-src/skills/systematic-debugging/evals/evals.json +0 -20
  198. package/dist/agent-src/skills/test-case-discovery/evals/triggers.json +0 -52
  199. package/dist/agent-src/skills/test-driven-development/evals/evals.json +0 -16
  200. package/dist/agent-src/skills/threat-modeling/evals/evals.json +0 -21
  201. package/dist/agent-src/skills/typography-system/evals/evals.json +0 -14
  202. package/dist/agent-src/skills/typography-system/evals/triggers.json +0 -17
  203. package/dist/agent-src/skills/unit-economics-modeling/evals/domain-truth.json +0 -40
  204. package/dist/agent-src/skills/unit-economics-modeling/evals/evals.json +0 -24
  205. package/dist/agent-src/skills/verify-completion-evidence/evals/evals.json +0 -16
  206. package/dist/agent-src/skills/verify-repair-loop/evals/output-schema.yml +0 -20
  207. package/dist/agent-src/skills/verify-repair-loop/evals/triggers.json +0 -17
  208. package/dist/agent-src/skills/vision-articulation/evals/evals.json +0 -16
  209. package/dist/agent-src/skills/voice-and-tone-design/evals/evals.json +0 -16
  210. package/dist/agent-src/skills/wireframe/evals/triggers.json +0 -17
  211. package/dist/agent-src/skills/workspace-link/evals/triggers.json +0 -17
  212. package/dist/agent-src/skills/worktree-lifecycle/evals/evals.json +0 -38
  213. package/dist/agent-src/skills/worktree-lifecycle/evals/triggers.json +0 -52
  214. package/dist/cli/agent-config.js.map +0 -1
  215. package/dist/cli/bash/runBash.js.map +0 -1
  216. package/dist/cli/commands/commands.js.map +0 -1
  217. package/dist/cli/commands/config.js.map +0 -1
  218. package/dist/cli/commands/doctorShell.js.map +0 -1
  219. package/dist/cli/commands/mcpServer.js.map +0 -1
  220. package/dist/cli/commands/packs.js.map +0 -1
  221. package/dist/cli/commands/profiles.js.map +0 -1
  222. package/dist/cli/commands/recordTriggerEval.js.map +0 -1
  223. package/dist/cli/commands/rtkDetect.js.map +0 -1
  224. package/dist/cli/commands/settings.js.map +0 -1
  225. package/dist/cli/commands/uiAudit.js.map +0 -1
  226. package/dist/cli/commands/uiRender.js.map +0 -1
  227. package/dist/cli/commands/uiServe.js.map +0 -1
  228. package/dist/cli/commands/versions.js.map +0 -1
  229. package/dist/cli/commands/workspaces.js.map +0 -1
  230. package/dist/cli/configRoot.js.map +0 -1
  231. package/dist/cli/discovery/loadManifest.js.map +0 -1
  232. package/dist/cli/firstRunNotice.js.map +0 -1
  233. package/dist/cli/help.js.map +0 -1
  234. package/dist/cli/initRouting.js.map +0 -1
  235. package/dist/cli/log/logger.js.map +0 -1
  236. package/dist/cli/main.js.map +0 -1
  237. package/dist/cli/mcp/content.js.map +0 -1
  238. package/dist/cli/mcp/dispatch.js.map +0 -1
  239. package/dist/cli/mcp/stdio.js.map +0 -1
  240. package/dist/cli/paths.js.map +0 -1
  241. package/dist/cli/python/knowledge_ingest.js.map +0 -1
  242. package/dist/cli/python/workspace_analytics.js.map +0 -1
  243. package/dist/cli/python/workspace_crypto.js.map +0 -1
  244. package/dist/cli/python/workspace_documents.js.map +0 -1
  245. package/dist/cli/python/workspace_drive.js.map +0 -1
  246. package/dist/cli/python/workspace_drive_health.js.map +0 -1
  247. package/dist/cli/python/workspace_explain.js.map +0 -1
  248. package/dist/cli/python/workspace_hosts.js.map +0 -1
  249. package/dist/cli/python/workspace_inbox.js.map +0 -1
  250. package/dist/cli/python/workspace_render.js.map +0 -1
  251. package/dist/cli/python/workspace_roles.js.map +0 -1
  252. package/dist/cli/python/workspace_secrets.js.map +0 -1
  253. package/dist/cli/python/workspace_sessions.js.map +0 -1
  254. package/dist/cli/python/workspace_skills.js.map +0 -1
  255. package/dist/cli/registry.js.map +0 -1
  256. package/dist/install/agentSwitchDetection.js.map +0 -1
  257. package/dist/install/agentSwitchProfile.js.map +0 -1
  258. package/dist/install/atomic.js.map +0 -1
  259. package/dist/install/claudePathsPlan.js.map +0 -1
  260. package/dist/install/conflict.js.map +0 -1
  261. package/dist/install/detect.js.map +0 -1
  262. package/dist/install/emit_host_rules_cli.js.map +0 -1
  263. package/dist/install/globalRuleLayers.js.map +0 -1
  264. package/dist/install/hostLayerFingerprint.js.map +0 -1
  265. package/dist/install/partitionEligibility.js.map +0 -1
  266. package/dist/install/paths.js.map +0 -1
  267. package/dist/install/plan.js.map +0 -1
  268. package/dist/install/preflight.js.map +0 -1
  269. package/dist/install/rtkDetection.js.map +0 -1
  270. package/dist/install/ruleInScope.js.map +0 -1
  271. package/dist/install/ruleLayerPartition.js.map +0 -1
  272. package/dist/install/rule_scope.js.map +0 -1
  273. package/dist/install/rule_scope_cli.js.map +0 -1
  274. package/dist/install/selectedTools.js.map +0 -1
  275. package/dist/install/toolDetection.js.map +0 -1
  276. package/dist/install/txlog.js.map +0 -1
  277. package/dist/install/types.js.map +0 -1
  278. package/dist/install/wizard-plan.js.map +0 -1
  279. package/dist/install/wizardDismissals.js.map +0 -1
  280. package/dist/scripts/_lib/agent_settings.js.map +0 -1
  281. package/dist/scripts/_lib/agent_src.js.map +0 -1
  282. package/dist/scripts/_lib/claude_builtin_names.js.map +0 -1
  283. package/dist/scripts/_lib/claude_plugin.js.map +0 -1
  284. package/dist/scripts/_lib/claude_settings_hooks.js.map +0 -1
  285. package/dist/scripts/_lib/compile_time_toggles.js.map +0 -1
  286. package/dist/scripts/_lib/environment_detector.js.map +0 -1
  287. package/dist/scripts/_lib/host_launch.js.map +0 -1
  288. package/dist/scripts/_lib/install_layout.js.map +0 -1
  289. package/dist/scripts/_lib/installed_lock.js.map +0 -1
  290. package/dist/scripts/_lib/lean_projection_mode.js.map +0 -1
  291. package/dist/scripts/_lib/model_tier.js.map +0 -1
  292. package/dist/scripts/_lib/prune_empty_dirs.js.map +0 -1
  293. package/dist/scripts/_lib/scoped_projection.js.map +0 -1
  294. package/dist/scripts/_lib/script_output.js.map +0 -1
  295. package/dist/scripts/_lib/spawn_env.js.map +0 -1
  296. package/dist/scripts/_lib/surface_tiers.js.map +0 -1
  297. package/dist/scripts/_lib/token_count.js.map +0 -1
  298. package/dist/scripts/_lib/trigger_eval_floors.js.map +0 -1
  299. package/dist/scripts/_lib/ui_surface.js.map +0 -1
  300. package/dist/scripts/_lib/user_global_paths.js.map +0 -1
  301. package/dist/scripts/ai_council/modes.js.map +0 -1
  302. package/dist/scripts/ai_council/transport_resolver.js.map +0 -1
  303. package/dist/scripts/condense.js.map +0 -1
  304. package/dist/scripts/project_thin_rules.js.map +0 -1
  305. package/dist/server/app.js.map +0 -1
  306. package/dist/server/io/atomicMultiWrite.js.map +0 -1
  307. package/dist/server/io/atomicWrite.js.map +0 -1
  308. package/dist/server/io/sharedWriteCheck.js.map +0 -1
  309. package/dist/server/io/substituteTemplate.js.map +0 -1
  310. package/dist/server/io/yamlIO.js.map +0 -1
  311. package/dist/server/nicknameResolver.js.map +0 -1
  312. package/dist/server/port.js.map +0 -1
  313. package/dist/server/routes/discovery.js.map +0 -1
  314. package/dist/server/routes/install.js.map +0 -1
  315. package/dist/server/routes/ping.js.map +0 -1
  316. package/dist/server/routes/schema.js.map +0 -1
  317. package/dist/server/routes/settings.js.map +0 -1
  318. package/dist/server/routes/settingsChanges.js.map +0 -1
  319. package/dist/server/routes/userMd.js.map +0 -1
  320. package/dist/server/routes/wizard.js.map +0 -1
  321. package/dist/server/routes/workspace.js.map +0 -1
  322. package/dist/server/schemas/settings.js.map +0 -1
  323. package/dist/server/serverInfo.js.map +0 -1
  324. package/dist/server/token.js.map +0 -1
  325. package/dist/server/writeRoot.js.map +0 -1
  326. package/dist/shared/capabilities.js.map +0 -1
  327. package/dist/shared/interactiveContext.js.map +0 -1
  328. package/dist/shared/nicknamePrefill.js.map +0 -1
  329. package/dist/shared/settingsAsks.js.map +0 -1
  330. package/dist/shared/settingsCarveOut.js.map +0 -1
  331. package/dist/shared/settingsClasses.js.map +0 -1
  332. package/dist/shared/settingsConsent.js.map +0 -1
  333. package/dist/shared/settingsSurface.js.map +0 -1
  334. package/dist/shared/skillRanking.js.map +0 -1
  335. package/dist/shared/userMd/formAdapter.js.map +0 -1
  336. package/dist/shared/userMd/schema.js.map +0 -1
  337. package/dist/shared/userMd/utils.js.map +0 -1
  338. package/dist/ui/assets/index-Cxgy63kz.js.map +0 -1
  339. package/src/scripts/_lib/adr_frontmatter.test.ts +0 -365
  340. package/src/scripts/_lib/adversarial_council_gate.test.ts +0 -112
  341. package/src/scripts/_lib/adversarial_reconcile.test.ts +0 -197
  342. package/src/scripts/_lib/auto_dispatch.corpus.test.ts +0 -150
  343. package/src/scripts/_lib/secret_detector.test.ts +0 -108
  344. package/src/scripts/_lib/secret_detector_adversarial.test.ts +0 -116
  345. package/src/scripts/_lib/ui_authority.test.ts +0 -251
  346. package/src/scripts/_lib/untrusted_content.test.ts +0 -175
  347. package/src/scripts/check_secret_leak.test.ts +0 -90
  348. package/src/scripts/design_slop_rules.test.ts +0 -246
  349. package/src/scripts/self_review_gate.test.ts +0 -296
  350. package/src/shared/capabilities.test.ts +0 -43
@@ -1,72 +0,0 @@
1
- {
2
- "skill": "gated-reach",
3
- "last_eval": "2026-07-25",
4
- "description": "6 should-trigger + 8 should-not-trigger queries. Should-trigger covers DE + EN phrasings for the two ship-tier intents only: reading a Reddit thread (text, and ranking/structure) and reading a single named tweet. Should-not-trigger is deliberately larger than the positive set: the parent bench found the native web tools already win on ordinary research, so this skill's main failure mode is over-triggering. Negatives cover general research, plain web pages, the parked YouTube channel, unsupported Twitter surfaces (timelines/search), and an unsupported platform — a trigger that fires only to decline is worse than no trigger.",
5
- "queries": [
6
- {
7
- "q": "what does this reddit thread say? https://www.reddit.com/r/rust/comments/abc123/",
8
- "trigger": true
9
- },
10
- {
11
- "q": "which comment did people actually upvote in this reddit discussion?",
12
- "trigger": true,
13
- "note": "ranking intent — tier 2, the credential-free capability this roadmap shipped"
14
- },
15
- {
16
- "q": "reddit.com wird von deinem web-tool abgelehnt — lies mir den Thread trotzdem vor",
17
- "trigger": true
18
- },
19
- {
20
- "q": "summarise the top comments and their scores on this r/programming post",
21
- "trigger": true
22
- },
23
- {
24
- "q": "what does this tweet say? https://x.com/somesmallaccount/status/1964428927159382261",
25
- "trigger": true
26
- },
27
- {
28
- "q": "x.com gibt 402 zurück — was steht in diesem Tweet?",
29
- "trigger": true
30
- },
31
- {
32
- "q": "research the current best practice for database connection pooling",
33
- "trigger": false,
34
- "note": "ordinary dev research — native web tools win 12/12 (parent bench null)"
35
- },
36
- {
37
- "q": "fetch this blog post and summarise it",
38
- "trigger": false,
39
- "note": "plain web page — the host's own fetch handles it"
40
- },
41
- {
42
- "q": "get me the transcript of this YouTube video",
43
- "trigger": false,
44
- "note": "youtube-transcripts is PARKED — backend absent by design; reach:doctor states it"
45
- },
46
- {
47
- "q": "pull this user's recent twitter timeline",
48
- "trigger": false,
49
- "note": "no credential-free path to timelines — not a shipped intent"
50
- },
51
- {
52
- "q": "search twitter for mentions of our product",
53
- "trigger": false,
54
- "note": "no credential-free path to search — not a shipped intent"
55
- },
56
- {
57
- "q": "read this Weibo thread for me",
58
- "trigger": false,
59
- "note": "no prescription exists for CN platforms — declining is not a trigger"
60
- },
61
- {
62
- "q": "what are the open issues on this GitHub repo?",
63
- "trigger": false,
64
- "note": "the github channel is a separate, already-working surface"
65
- },
66
- {
67
- "q": "install yt-dlp for me so the youtube channel works",
68
- "trigger": false,
69
- "note": "the package never auto-installs — missing-tool-handling, not this skill"
70
- }
71
- ]
72
- }
@@ -1,25 +0,0 @@
1
- {
2
- "skill": "github-ci",
3
- "_calibration": "Seed for eval-schema v2 (ecosystem-harvest skill-quality-gates Phase 2). The requires_human scenario is skipped in CI and reported manual-pending — never a silent pass.",
4
- "scenarios": [
5
- {
6
- "id": "fetches-real-ci-logs-not-guess",
7
- "prompt": "The PR's Node Tests check is red. Diagnose why.",
8
- "environment": "an open PR with a failing CI check",
9
- "assertions": [
10
- { "kind": "tool-choice", "must_use": ["bash"], "must_not_use": [] },
11
- { "kind": "contains", "value": "log" }
12
- ]
13
- },
14
- {
15
- "id": "operator-confirms-rerun",
16
- "prompt": "Re-run the failed CI job after the fix is pushed.",
17
- "environment": "an open PR whose fix was just pushed",
18
- "requires_human": true,
19
- "human_instructions": "Confirm the agent fetched the real run id and did not fabricate a green result; verify the re-run was triggered against the actual failing job.",
20
- "assertions": [
21
- { "kind": "contains", "value": "run" }
22
- ]
23
- }
24
- ]
25
- }
@@ -1,17 +0,0 @@
1
- {
2
- "skill": "history-design",
3
- "last_eval": "2026-07-27",
4
- "description": "5 should-trigger + 5 should-not-trigger. Should-trigger covers DE+EN phrasings for choosing an audit/history mechanism (tier matrix). Should-not-trigger covers near-miss neighbours: migration review (schema-review), privacy/DSR policy (privacy-review), retention floors (domain-safety-retention), git history.",
5
- "queries": [
6
- { "q": "we need to track who changed what and when on tenant data", "trigger": true },
7
- { "q": "wir brauchen eine Änderungshistorie — wer hat was wann geändert?", "trigger": true },
8
- { "q": "should we use event sourcing for the orders domain?", "trigger": true },
9
- { "q": "add an audit trail to the admin panel models", "trigger": true },
10
- { "q": "which activity log package fits our Laravel app?", "trigger": true },
11
- { "q": "review this migration for missing indexes", "trigger": false },
12
- { "q": "how long may we keep support tickets under GDPR?", "trigger": false },
13
- { "q": "squash my last three git commits into one", "trigger": false },
14
- { "q": "anonymize user data on account deletion", "trigger": false },
15
- { "q": "profile the slow audit report query in production", "trigger": false }
16
- ]
17
- }
@@ -1,17 +0,0 @@
1
- {
2
- "skill": "html-deck",
3
- "last_eval": "2026-07-06",
4
- "description": "5 should-trigger + 5 should-not-trigger. Should-trigger covers deck/slides/presentation/pitch builds in HTML. Should-not-trigger covers near-miss neighbors: canvas-design (posters/static art), fe-design (responsive UI), design-variations (options), PowerPoint-file requests, and content-only outline asks.",
5
- "queries": [
6
- {"q": "make a 10-slide deck for the investor pitch", "trigger": true},
7
- {"q": "build a presentation from this PRD for the engineering all-hands", "trigger": true},
8
- {"q": "turn these notes into HTML slides I can present tomorrow", "trigger": true},
9
- {"q": "create a pitch deck with our brand colors, 16:9", "trigger": true},
10
- {"q": "I need a slide presentation that also prints to PDF", "trigger": true},
11
- {"q": "design a poster for the conference booth", "trigger": false, "note": "static one-frame art → canvas-design"},
12
- {"q": "build the landing page hero section", "trigger": false, "note": "responsive UI → fe-design / stack executor"},
13
- {"q": "show me 3 design options for this dashboard", "trigger": false, "note": "options → design-variations"},
14
- {"q": "write an outline for my talk", "trigger": false, "note": "content-only ask, no HTML deliverable"},
15
- {"q": "export our Google Slides to PowerPoint", "trigger": false, "note": "file conversion, not an HTML deck build"}
16
- ]
17
- }
@@ -1,57 +0,0 @@
1
- {
2
- "$comment": "Fixtures for stripCarrierUnicode (detect_ai_tells.ts). Six cases, reproduced offline against the real _classify export before the roadmap that added them was written. Every hidden codepoint is written as a JSON \\u escape and NEVER as a literal character: the first version of this file used literals, which (a) made the payloads invisible in review and (b) reddened lint_hidden_unicode with 20 blocking findings, since a tracked file carrying real carriers is exactly what that gate exists to refuse. JSON.parse decodes the escapes, so the test still receives the real characters at runtime.",
3
- "recorded_limitation": {
4
- "what": "The complex-script preservation cases are a CURATED BLOCK SET, not a Unicode Script-property lookup.",
5
- "tested_blocks": [
6
- "Arabic/Persian (U+0600-U+06FF)",
7
- "emoji ZWJ sequences (U+1F400-U+1FAFF joined by U+200D)"
8
- ],
9
- "untested": "Indic (Devanagari, Bengali, Tamil, ...), Thai, Khmer, Myanmar, Mongolian, and every other script that uses a format character mid-word.",
10
- "why_this_is_acceptable": "The predicate errs toward PRESERVATION: a carrier is removed only when both neighbours are ASCII, so a format character inside a non-ASCII word is preserved whatever its script. An untested script is therefore preserved rather than corrupted — the failure mode cannot occur in the unsafe direction. A full Script-property table would be a new data dependency guarding a failure that cannot happen.",
11
- "what_would_change_this": "A script whose format characters legitimately appear between two ASCII characters. None is known; one would make the block set insufficient rather than merely untested."
12
- },
13
- "cases": [
14
- {
15
- "name": "ASCII-flanked zero-width space is removed",
16
- "input": "the\u200bword",
17
- "expect_out": "theword",
18
- "expect_removed": 1,
19
- "expect_preserved": 0
20
- },
21
- {
22
- "name": "ASCII-flanked right-to-left override is removed",
23
- "input": "safe\u202efile.txt",
24
- "expect_out": "safefile.txt",
25
- "expect_removed": 1,
26
- "expect_preserved": 0
27
- },
28
- {
29
- "name": "ASCII-flanked Unicode-tag codepoint is removed",
30
- "input": "a\udb40\udc41b",
31
- "expect_out": "ab",
32
- "expect_removed": 1,
33
- "expect_preserved": 0
34
- },
35
- {
36
- "name": "emoji ZWJ sequence survives byte-identically",
37
- "input": "👨\u200d💻 ships it",
38
- "expect_out": "👨\u200d💻 ships it",
39
- "expect_removed": 0,
40
- "expect_preserved": 1
41
- },
42
- {
43
- "name": "Persian ZWNJ survives byte-identically",
44
- "input": "می\u200cخواهم",
45
- "expect_out": "می\u200cخواهم",
46
- "expect_removed": 0,
47
- "expect_preserved": 1
48
- },
49
- {
50
- "name": "clean prose is a no-op, and the strip is idempotent",
51
- "input": "Nothing hidden here — just prose with an em dash.",
52
- "expect_out": "Nothing hidden here — just prose with an em dash.",
53
- "expect_removed": 0,
54
- "expect_preserved": 0
55
- }
56
- ]
57
- }
@@ -1,17 +0,0 @@
1
- {
2
- "skill": "humanizer",
3
- "last_eval": "2026-07-11",
4
- "description": "5 should-trigger + 5 should-not-trigger queries. Should-trigger covers de-slopping deliverable prose (EN + DE phrasings). Should-not-trigger covers the near-miss neighbors: brand-voice definition (voice-and-tone-design), chat-reply tone (direct-answers), voice-capture drafting (ghostwriter), translation, and plain shortening.",
5
- "queries": [
6
- {"q": "make this sound less like AI", "trigger": true},
7
- {"q": "this post reads like ChatGPT wrote it, fix that", "trigger": true},
8
- {"q": "humanize this draft", "trigger": true},
9
- {"q": "remove the AI-isms from my article", "trigger": true},
10
- {"q": "schreib das um, damit es nicht KI-generiert klingt", "trigger": true},
11
- {"q": "define our brand voice", "trigger": false, "note": "routes to voice-and-tone-design (voice definition, not per-line editing)"},
12
- {"q": "stop opening your replies with praise", "trigger": false, "note": "chat-reply tone — owned by direct-answers"},
13
- {"q": "write a LinkedIn post in the style of a public figure", "trigger": false, "note": "routes to /ghostwriter:write (humanizer runs inside its step 4b, not standalone)"},
14
- {"q": "translate this paragraph to German", "trigger": false, "note": "translation, not de-slopping"},
15
- {"q": "shorten this paragraph to half the length", "trigger": false, "note": "compression, not tell removal"}
16
- ]
17
- }
@@ -1,17 +0,0 @@
1
- {
2
- "skill": "iconography",
3
- "last_eval": "2026-06-16",
4
- "description": "5 should-trigger + 5 should-not-trigger. Should-trigger covers icon resolution, set selection, and embedding tasks. Should-not-trigger covers near-miss neighbors: typography-system (font/type choices), design-tokens (CSS variable authoring), image-provider-routing (AI-generated images), and a generic draw-an-icon image-gen request.",
5
- "queries": [
6
- {"q": "which icon should I use for a download action in Lucide?", "trigger": true},
7
- {"q": "add a warning icon to this component — we use Heroicons", "trigger": true},
8
- {"q": "pick an icon set for our new React app", "trigger": true},
9
- {"q": "wire Phosphor icons into our Blade templates", "trigger": true},
10
- {"q": "resolve the Iconify name for a user-profile icon in Tabler", "trigger": true},
11
- {"q": "pick a font pairing for our marketing page", "trigger": false, "note": "font/type selection → typography-system"},
12
- {"q": "author CSS variables for our color palette", "trigger": false, "note": "token authoring → design-tokens"},
13
- {"q": "which AI image model should I use for a product icon illustration?", "trigger": false, "note": "AI image generation routing → image-provider-routing"},
14
- {"q": "draw me an icon for a mobile app in Midjourney", "trigger": false, "note": "image-gen request, not Iconify/UI icon resolution"},
15
- {"q": "set up dark mode token overrides for our design system", "trigger": false, "note": "dark-mode token authoring → design-tokens"}
16
- ]
17
- }
@@ -1,17 +0,0 @@
1
- {
2
- "skill": "image-analyser",
3
- "last_eval": "2026-06-16",
4
- "description": "5 should-trigger + 5 should-not-trigger. Should-trigger covers the analyse / canon-diff / accuracy-check / drift-find / bootstrap-from-portrait paths (DE + EN). Should-not covers the near-miss neighbours whose vocabulary overlaps: scene/motion review (video-director), non-character art (canvas-design), cross-scene token lock (character-consistency), generation (image-creator), and document OCR (generic).",
5
- "queries": [
6
- {"q": "analyse this character image down to the last detail", "trigger": true},
7
- {"q": "does img_2.png match the Charakterbuch canon?", "trigger": true},
8
- {"q": "check this render for character accuracy — what drifted?", "trigger": true},
9
- {"q": "vergleiche das Bild mit der Charakterbeschreibung, jedes Merkmal", "trigger": true},
10
- {"q": "build a canon spec from this authoritative portrait", "trigger": true},
11
- {"q": "turn this scene idea into a cinematic video prompt", "trigger": false, "note": "scene/motion → video-director"},
12
- {"q": "design a poster for the band", "trigger": false, "note": "static non-character art → canvas-design"},
13
- {"q": "lock this character's tokens so every scene reuses them", "trigger": false, "note": "cross-scene token lock → character-consistency"},
14
- {"q": "generate Veikko in the forge scene to spec", "trigger": false, "note": "generation → image-creator"},
15
- {"q": "extract the text from this scanned invoice", "trigger": false, "note": "plain document OCR, not character analysis"}
16
- ]
17
- }
@@ -1,17 +0,0 @@
1
- {
2
- "skill": "image-creator",
3
- "last_eval": "2026-06-16",
4
- "description": "5 should-trigger + 5 should-not-trigger. Should-trigger covers generate/render/to-spec/loop-fix paths (DE + EN). Should-not covers near-miss neighbours: analysis (image-analyser), scene/motion (video-director, motion-choreographer), non-character art (canvas-design), and token-lock (character-consistency).",
5
- "queries": [
6
- {"q": "generate Veikko in the forge scene, matched to the canon", "trigger": true},
7
- {"q": "render this character to spec, max detail", "trigger": true},
8
- {"q": "create the image and make every tattoo placement exact", "trigger": true},
9
- {"q": "erzeuge das Bild so detailgenau wie möglich nach der Vorlage", "trigger": true},
10
- {"q": "regenerate with the heterochromia and hair-split fixed", "trigger": true},
11
- {"q": "analyse this image and tell me what drifted", "trigger": false, "note": "analysis → image-analyser"},
12
- {"q": "turn this still into a cinematic motion prompt for Veo", "trigger": false, "note": "motion → motion-choreographer"},
13
- {"q": "expand this one-line idea into a scene blueprint", "trigger": false, "note": "scene → scene-expander/video-director"},
14
- {"q": "design a tour poster", "trigger": false, "note": "static non-character art → canvas-design"},
15
- {"q": "lock the character tokens so all scenes reuse them", "trigger": false, "note": "token lock → character-consistency"}
16
- ]
17
- }
@@ -1,17 +0,0 @@
1
- {
2
- "skill": "image-editing",
3
- "last_eval": "2026-06-16",
4
- "description": "5 should-trigger + 5 should-not-trigger. Should-trigger covers inpainting, background replacement, colour variation, object removal, and targeted render modification. Should-not covers near-miss neighbours: greenfield image generation (image-creator/image-generation), provider selection (image-provider-routing), prompt writing (image-creator), rights/licence check (media governance).",
5
- "queries": [
6
- { "q": "edit the background of this product shot to a white studio setting", "trigger": true },
7
- { "q": "inpaint the logo out of the upper-right corner of this image", "trigger": true },
8
- { "q": "make a variation of this hero image in a warmer colour palette", "trigger": true },
9
- { "q": "remove the person standing on the left side of the photo", "trigger": true },
10
- { "q": "modify this existing render — I want the sky replaced with a sunset", "trigger": true },
11
- { "q": "generate a new product shot from scratch — I have no existing image", "trigger": false, "note": "greenfield generation → image-creator / image-generation" },
12
- { "q": "which image provider should I use for this job?", "trigger": false, "note": "provider routing → image-provider-routing" },
13
- { "q": "create a logo for my company", "trigger": false, "note": "logo creation → logo-generation" },
14
- { "q": "how do I write a good prompt for Ideogram?", "trigger": false, "note": "prompt engineering → image-creator" },
15
- { "q": "do I need a rights check before using a celebrity's likeness in my image?", "trigger": false, "note": "likeness / rights → media governance rules" }
16
- ]
17
- }
@@ -1,17 +0,0 @@
1
- {
2
- "skill": "image-generation",
3
- "last_eval": "2026-06-16",
4
- "description": "5 should-trigger + 5 should-not-trigger. Should-trigger covers end-to-end image generation requests (brief → render). Should-not-trigger covers near-miss neighbors: routing-only questions (image-provider-routing), prompt-writing-only (prompt-engineering-image), image editing (image-editing), logo-specific flows (logo-generation), and rights checks (image-likeness-and-rights).",
5
- "queries": [
6
- {"q": "generate an image of a product shot for our new coffee mug", "trigger": true},
7
- {"q": "create a banner image for our bakery with the name on it", "trigger": true},
8
- {"q": "I need an image generated for our website hero section", "trigger": true},
9
- {"q": "produce a series of consistent character illustrations for our app onboarding", "trigger": true},
10
- {"q": "generate a square social media image of a smiling barista", "trigger": true},
11
- {"q": "which image model should I use for a logo with text?", "trigger": false, "note": "routing-only question → image-provider-routing"},
12
- {"q": "write me an Ideogram prompt for this bakery banner brief", "trigger": false, "note": "prompt authoring only → prompt-engineering-image"},
13
- {"q": "edit this photo to remove the background and add a sunset", "trigger": false, "note": "editing an existing image → image-editing"},
14
- {"q": "create a vector SVG logo for our brand", "trigger": false, "note": "logo-specific flow → logo-generation"},
15
- {"q": "can I use this celebrity's photo as a reference for my image prompt?", "trigger": false, "note": "rights / likeness check → image-likeness-and-rights"}
16
- ]
17
- }
@@ -1,17 +0,0 @@
1
- {
2
- "skill": "image-provider-routing",
3
- "last_eval": "2026-06-16",
4
- "description": "5 should-trigger + 5 should-not-trigger. Should-trigger covers job-shape to provider matching. Should-not-trigger covers near-miss neighbors: writing the actual prompt (prompt-engineering-image), invoking the adapter directly, media policy checks (media-governance-routing), and general image editing without a routing question.",
5
- "queries": [
6
- {"q": "which image model should I use for a logo with text?", "trigger": true},
7
- {"q": "route this image generation job — it needs a photorealistic product shot", "trigger": true},
8
- {"q": "I need a vector SVG icon, what provider handles that?", "trigger": true},
9
- {"q": "pick the right AI image provider for a bakery banner with the name on it", "trigger": true},
10
- {"q": "should I use Ideogram or Flux for this image brief?", "trigger": true},
11
- {"q": "write me an Ideogram prompt for this logo brief", "trigger": false, "note": "writing provider-specific prompt grammar → prompt-engineering-image"},
12
- {"q": "run the recraft adapter with this prompt", "trigger": false, "note": "direct adapter invocation, not routing selection"},
13
- {"q": "can I use a celebrity's face in this image?", "trigger": false, "note": "likeness / rights question → media-governance-routing / image-likeness-and-rights"},
14
- {"q": "edit this existing photo to remove the background", "trigger": false, "note": "editing task, not a provider routing decision"},
15
- {"q": "what lifecycle tier is the Flux adapter?", "trigger": false, "note": "lifecycle tier lookup → provider-lifecycle-discipline"}
16
- ]
17
- }
@@ -1,16 +0,0 @@
1
- {
2
- "skill": "incident-commander",
3
- "domain": "ops",
4
- "_note": "Rubric domain-truth fixture (road-to-domain-soundness Phase 2, rubric target). The criterion names a CITED EXTERNAL practice/standard — NOT the skill's own output (blocker: domain-competence-for-answer-keys, option a). Authored as a maintainer-RATIFICATION CANDIDATE: rubric is NON-deterministic (pinned-judge known-limit); the Phase-3 run + --write-floor ratchet-pin + per-domain backed-CLAIMS remain the maintainer's gate.",
5
- "cases": [
6
- {
7
- "id": "matches-ics-sre-incident-practice",
8
- "scenario": "Production checkout is failing for all users. Coordinate the incident from declaration to mitigation.",
9
- "source": "Incident Command System (ICS — FEMA/NIMS) + Google SRE incident management ('SRE Workbook', Incident Response): declared severity, distinct IC/comms/ops roles, comms cadence, mitigation-before-root-cause.",
10
- "check": {
11
- "kind": "rubric",
12
- "criterion": "Matches ICS / SRE incident-management practice: declares a severity level, assigns distinct Incident-Commander / communications / ops-lead roles, sets an external comms cadence, and drives mitigation before root-cause — not ad-hoc firefighting or a single-person response."
13
- }
14
- }
15
- ]
16
- }
@@ -1,20 +0,0 @@
1
- {
2
- "skill": "incident-commander",
3
- "_calibration": "Behavioural fixture (road-to-skill-eval-coverage Phase 2, default-surface). Deterministic assertions on a real output property where reliable; rubric pins the qualitative core as a known-limit (pass ratified in PR review, not a hidden judge). finding_floor n is a conservative floor, not a calibrated per-host number.",
4
- "scenarios": [
5
- {
6
- "id": "coordinate-incident",
7
- "prompt": "Production is down — checkout is failing for all users. Coordinate the incident.",
8
- "assertions": [
9
- {
10
- "kind": "contains",
11
- "value": "sever"
12
- },
13
- {
14
- "kind": "rubric",
15
- "criterion": "Declares a severity, assigns IC/comms/ops roles, sets a comms cadence, and drives to mitigation-before-root-cause — matches a named IC practice."
16
- }
17
- ]
18
- }
19
- ]
20
- }
@@ -1,17 +0,0 @@
1
- {
2
- "skill": "js-library-packaging",
3
- "last_eval": "2026-08-23",
4
- "description": "5 should-trigger + 5 should-not-trigger. Should-trigger covers the publish ask, the runtime symptom whose cause is packaging (invalid hook call), the exports-map question, the workspace-range install failure, and a DE phrasing. Should-not-trigger covers the near-miss neighbours this skill is one word away from: authoring the component itself (ui-component-architect), the PHP twin (composer-packages), a commit-message question (conventional-commits-writing), a monorepo task-graph question, and a bundler performance question — none of which are package-surface work.",
5
- "queries": [
6
- { "q": "publish our ui package", "trigger": true },
7
- { "q": "why does my hook say invalid hook call", "trigger": true },
8
- { "q": "what should the exports map for this library look like?", "trigger": true },
9
- { "q": "the install fails on a workspace: range after publishing", "trigger": true },
10
- { "q": "wie veröffentliche ich unser Komponenten-Paket richtig?", "trigger": true },
11
- { "q": "build me a Button component with a loading state", "trigger": false },
12
- { "q": "how do I publish a composer package?", "trigger": false },
13
- { "q": "write the commit message for this breaking change", "trigger": false },
14
- { "q": "why is turbo rebuilding everything on every commit?", "trigger": false },
15
- { "q": "our bundle is 400kb, what should I lazy-load?", "trigger": false }
16
- ]
17
- }
@@ -1,17 +0,0 @@
1
- {
2
- "skill": "judge-artifact-completeness",
3
- "last_eval": "2026-06-27",
4
- "description": "5 should-trigger + 5 should-not-trigger. Should-trigger covers scoring roadmaps, PR reviews, ADRs, and tickets for completeness (risk, tests, migration, AC, DoR). Should-not covers near-miss neighbours: code-quality review (judge-code-quality), bug hunting (judge-bug-hunter), test-file coverage (judge-test-coverage), security audit (judge-security-auditor), and creating an ADR from scratch (adr-create).",
5
- "queries": [
6
- { "q": "score this roadmap for completeness — does it cover risk, tests, and migration?", "trigger": true },
7
- { "q": "does this PR review have enough evidence? is each finding traceable to a diff line?", "trigger": true },
8
- { "q": "check if this ticket meets DoR — are the acceptance criteria verifiable?", "trigger": true },
9
- { "q": "is this ADR complete? does it name alternatives and state consequences?", "trigger": true },
10
- { "q": "what dimensions are missing from this roadmap — risk, maintainability, migration?", "trigger": true },
11
- { "q": "review the naming and DRY violations in this diff", "trigger": false, "note": "code quality → judge-code-quality" },
12
- { "q": "find the bugs introduced by this change", "trigger": false, "note": "bug hunting → judge-bug-hunter" },
13
- { "q": "does this PR add enough test coverage for the new behaviour?", "trigger": false, "note": "test-file coverage → judge-test-coverage" },
14
- { "q": "are there security issues in this authentication middleware?", "trigger": false, "note": "security → judge-security-auditor" },
15
- { "q": "create an ADR for switching from REST to GraphQL", "trigger": false, "note": "ADR creation → adr-create, not scoring" }
16
- ]
17
- }
@@ -1,17 +0,0 @@
1
- {
2
- "skill": "judge-injection-defense",
3
- "last_eval": "2026-06-27",
4
- "description": "5 should-trigger + 5 should-not-trigger. Should-trigger covers scoring an agent's response to an injection / role-takeover / fake-boundary / obfuscated-instruction attempt on the defence axis. Should-not covers near-miss neighbours: artifact completeness (judge-artifact-completeness), code security-of-the-diff (judge-security-auditor), code correctness (judge-bug-hunter), authoring an injection-defense rule (rule-writing), and generic helpfulness scoring.",
5
- "queries": [
6
- { "q": "did the agent correctly refuse this role-takeover injection, or did it comply?", "trigger": true },
7
- { "q": "score whether this response treated the untrusted block as data and ignored the fake boundary token", "trigger": true },
8
- { "q": "the prompt tried to suppress the refusal — did the agent still emit the correct refusal?", "trigger": true },
9
- { "q": "check if AC's defence held against this leetspeak-obfuscated instruction — data, not command?", "trigger": true },
10
- { "q": "judge this response on injection defence: was any channel breached?", "trigger": true },
11
- { "q": "is this roadmap complete — does it cover risk and tests?", "trigger": false, "note": "artifact completeness → judge-artifact-completeness" },
12
- { "q": "are there injection vulnerabilities in this PR's input-handling code?", "trigger": false, "note": "code security-of-the-diff → judge-security-auditor" },
13
- { "q": "find the null-safety bugs in this diff", "trigger": false, "note": "code correctness → judge-bug-hunter" },
14
- { "q": "write a rule that defends against prompt injection", "trigger": false, "note": "authoring a rule → rule-writing" },
15
- { "q": "how helpful and complete was this assistant's answer?", "trigger": false, "note": "helpfulness scoring — explicitly NOT this judge's axis" }
16
- ]
17
- }
@@ -1,17 +0,0 @@
1
- {
2
- "skill": "judge-synthesis",
3
- "last_eval": "2026-06-28",
4
- "description": "5 should-trigger + 5 should-not-trigger. Should-trigger covers consolidating multiple already-run judge verdicts into one report (consensus, conflicts, must-fix). Should-not covers near-misses: producing a single judge verdict (the individual judges), dispatching judges (review-changes), code-only review, asking for a quality number, and running one judge.",
5
- "queries": [
6
- { "q": "consolidate these judge verdicts into one report — where do they agree and disagree?", "trigger": true },
7
- { "q": "I ran the bug, security and artifact-completeness judges — synthesize the findings", "trigger": true },
8
- { "q": "which findings did multiple judges flag, and what are the conflicts?", "trigger": true },
9
- { "q": "merge the judge outputs into a must-fix / should-fix / advisory split with provenance", "trigger": true },
10
- { "q": "give me one decision-ready report across all the judges that ran on this PR", "trigger": true },
11
- { "q": "judge this diff for bugs", "trigger": false, "note": "single verdict → judge-bug-hunter" },
12
- { "q": "self-review my changes before the PR", "trigger": false, "note": "dispatches the code judges → /review-changes" },
13
- { "q": "score this roadmap for completeness", "trigger": false, "note": "single artifact verdict → judge-artifact-completeness" },
14
- { "q": "give me one overall quality score for this PR", "trigger": false, "note": "opaque single number — explicitly forbidden by this skill" },
15
- { "q": "run the security auditor on this code", "trigger": false, "note": "runs one judge → judge-security-auditor" }
16
- ]
17
- }
@@ -1,21 +0,0 @@
1
- {
2
- "skill": "launch-readiness",
3
- "_calibration": "Behavioural fixture (road-to-skill-eval-coverage Phase 2, default-surface). Deterministic assertions on a real output property where reliable; rubric pins the qualitative core as a known-limit (pass ratified in PR review, not a hidden judge). finding_floor n is a conservative floor, not a calibrated per-host number.",
4
- "scenarios": [
5
- {
6
- "id": "launch-go-no-go",
7
- "prompt": "Are we ready to launch this feature to production?",
8
- "assertions": [
9
- {
10
- "kind": "finding_floor",
11
- "n": 3,
12
- "pattern": "(?m)^\\s*[-*+]\\s+"
13
- },
14
- {
15
- "kind": "rubric",
16
- "criterion": "Surfaces blast radius, rollback path, and observability/monitoring as explicit gates; a missing gate blocks go."
17
- }
18
- ]
19
- }
20
- ]
21
- }
@@ -1,52 +0,0 @@
1
- {
2
- "skill": "learning-tutor",
3
- "last_eval": "2026-07-30",
4
- "description": "5 should-trigger + 5 should-not-trigger queries. Should-trigger covers DE + EN phrasings for the six tutoring modes — rapid competence, error-driven drill, keystone decoding, goal-backward sprint, gap probe, Feynman check. Should-not-trigger covers the near-miss neighbours (package-artifact learning capture, plan stress-testing, long-form article analysis, employee onboarding programs, plain factual how-to answers) whose vocabulary overlaps.",
5
- "queries": [
6
- {
7
- "q": "teach me Postgres query planning — get me functional fast, practice first",
8
- "trigger": true
9
- },
10
- {
11
- "q": "quiz me on database indexes and find my blind spots, don't go easy on me",
12
- "trigger": true
13
- },
14
- {
15
- "q": "I don't get this spec — explain it so it actually clicks and then check I understood",
16
- "trigger": true
17
- },
18
- {
19
- "q": "bring mir Kubernetes bei und drill mich, statt mir einen Vortrag zu halten",
20
- "trigger": true
21
- },
22
- {
23
- "q": "I have to ship a Terraform module in two weeks and I've never used it — give me a learning plan",
24
- "trigger": true
25
- },
26
- {
27
- "q": "I keep making this same mistake — turn that learning into a rule for the package",
28
- "trigger": false,
29
- "note": "capturing a learning as a package artifact (agent learns, not the user) → learning-to-rule-or-skill"
30
- },
31
- {
32
- "q": "poke holes in this migration plan, be brutal",
33
- "trigger": false,
34
- "note": "stress-testing a plan/artifact, not a person's understanding → adversarial-review"
35
- },
36
- {
37
- "q": "deep-dive this article and extract the insights with mental models",
38
- "trigger": false,
39
- "note": "long-form content analysis for the reader, no tutoring modes or comprehension gates → deep-reading-analyst"
40
- },
41
- {
42
- "q": "design our onboarding so new hires ramp faster, with 30/60/90 milestones",
43
- "trigger": false,
44
- "note": "employee onboarding program design, not tutoring a topic → onboarding-program"
45
- },
46
- {
47
- "q": "what's the difference between a left join and an inner join?",
48
- "trigger": false,
49
- "note": "direct factual question — answer it, never convert it into a curriculum (per direct-answers); the skill explicitly excludes this"
50
- }
51
- ]
52
- }
@@ -1,17 +0,0 @@
1
- {
2
- "skill": "legal-intake-triage",
3
- "last_eval": "2026-06-24",
4
- "description": "5 should-trigger + 5 should-not-trigger. Should-trigger covers DE+EN phrasings for the fast 'is this a legal problem?' triage + lightweight intake. Should-not-trigger covers near-miss neighbours that are substantive reviews (contract-review, nda-triage, dpa-review) or profile setup.",
5
- "queries": [
6
- { "q": "is this a legal problem or can we just proceed?", "trigger": true },
7
- { "q": "do we need a lawyer for this, quick legal question", "trigger": true },
8
- { "q": "müssen wir da Legal einbinden oder ist das unkritisch?", "trigger": true },
9
- { "q": "triage this and route it to the right legal workflow", "trigger": true },
10
- { "q": "kurze rechtliche Einschätzung: ist das ein Problem?", "trigger": true },
11
- { "q": "review this NDA clause by clause", "trigger": false },
12
- { "q": "GREEN/YELLOW/RED triage of this specific NDA", "trigger": false },
13
- { "q": "review this DPA against Art. 28", "trigger": false },
14
- { "q": "configure our escalation owner and jurisdiction", "trigger": false },
15
- { "q": "estimate this engineering ticket", "trigger": false }
16
- ]
17
- }
@@ -1,17 +0,0 @@
1
- {
2
- "skill": "legal-practice-profile",
3
- "last_eval": "2026-06-24",
4
- "description": "5 should-trigger + 5 should-not-trigger. Should-trigger covers DE+EN phrasings for setting up / updating the legal pack's practice profile (jurisdiction, role, escalation, playbook positions). Should-not-trigger covers near-miss neighbours that are actual reviews/triage, not configuration.",
5
- "queries": [
6
- { "q": "set up the legal pack", "trigger": true },
7
- { "q": "configure our legal playbook positions and escalation owner", "trigger": true },
8
- { "q": "richte das Legal-Pack ein — Jurisdiktion und Rolle", "trigger": true },
9
- { "q": "update who reviews our RED contract items", "trigger": true },
10
- { "q": "wer ist unser Eskalations-Owner für Verträge? leg das fest", "trigger": true },
11
- { "q": "review this contract against our positions", "trigger": false },
12
- { "q": "check this NDA — can we sign?", "trigger": false },
13
- { "q": "review this DPA as controller", "trigger": false },
14
- { "q": "is this a legal problem?", "trigger": false },
15
- { "q": "set up my CI pipeline", "trigger": false }
16
- ]
17
- }
@@ -1,52 +0,0 @@
1
- {
2
- "skill": "license-compliance-audit",
3
- "last_eval": "2026-07-28",
4
- "description": "5 should-trigger + 5 should-not-trigger queries. Should-trigger covers running the on-demand jscpd/scanoss similarity scan on a diff or path, and asking whether a diff looks copied from known OSS. Should-not-trigger covers near-miss neighbours (a single named-source license check, notices regeneration, generic code review, dependency vetting) whose vocabulary overlaps.",
5
- "queries": [
6
- {
7
- "q": "this diff looks suspiciously similar to something I've seen, run a similarity scan against known OSS",
8
- "trigger": true
9
- },
10
- {
11
- "q": "run jscpd and scanoss on this PR to check for copied code",
12
- "trigger": true
13
- },
14
- {
15
- "q": "do a self-audit of the whole repo for potential license violations",
16
- "trigger": true
17
- },
18
- {
19
- "q": "check whether this file matches anything in the SCANOSS knowledge base",
20
- "trigger": true
21
- },
22
- {
23
- "q": "the reviewer flagged this function as possibly lifted from elsewhere, scan for a match",
24
- "trigger": true
25
- },
26
- {
27
- "q": "I want to borrow this specific function from https://github.com/example/repo, check its license",
28
- "trigger": false,
29
- "note": "single named source, targeted license check → license-compliance-borrow-check"
30
- },
31
- {
32
- "q": "regenerate the third-party notices file from the ledger",
33
- "trigger": false,
34
- "note": "notices regeneration → license-compliance-credits"
35
- },
36
- {
37
- "q": "review this diff for null-safety and edge cases",
38
- "trigger": false,
39
- "note": "correctness review, not a similarity scan"
40
- },
41
- {
42
- "q": "is this new npm package real or a hallucinated name?",
43
- "trigger": false,
44
- "note": "dependency existence check → supply-chain-intake"
45
- },
46
- {
47
- "q": "set up a CI job that blocks merges on copied code",
48
- "trigger": false,
49
- "note": "no CI gate exists or is planned here — Gate G0 cancelled it; this skill is on-demand only"
50
- }
51
- ]
52
- }